[arch-dev-public] [RFC] Moving repos to nymeria
stephane at archlinux.org
Thu Sep 6 11:23:40 EDT 2012
Le 2012-09-06 11:05, Florian Pritz a écrit :
> So we got a new box (nymeria) and I'd like to move
> core/extra/community/multilib/testing/.. repos + svn over there.
> Setup overview / changes:
> - create shell accounts for every user, but only allow certain commands
> to be executed (dbscripts, rsync)
> - move the svn2git conversion script to nymeria and let gudrun sync the
> repo periodically for cgit
> - let archweb sync the needed database files periodically
> - integrity check will run on nymeria
> - postfix for @archlinux.org and @aur.archlinux.org: see below [postfix]
> - did I miss something?
> - more trustful/locked-down system (could be useful for db signing)
> - 1TB of disk space (~900GiB for packages)
> - 100Mbit/s uplink
> - all packages on one box so if we do a big move, extra and community
> can be synced without admin intervention if dbscripts support that
> - gerolde won't run much (anything?) any more so it could potentially
> be merged back into gudrun/host system
> Drawbacks (kind of):
> - no more shell accounts for browsing the repo (brynhild can be used
> for that)
> - different network latency (gudrun is located in the US, nymeria in
> - users can no longer <s>mess up</s> change the repo db manually (no
> idea if that's still valid, but it happened a few years ago)
> We can move both domains to nymeria and let users change the forward
> destination themselves (need to make sure that you can't run arbitrary
> commands) or just appoint an admin that takes care of changing the
> destination since that shouldn't happen too often. In the second case we
> can keep them on gudrun/sigurd or move them where ever we want.
> Comments welcome.
Could we run sogrep on nymeria ?
Also, could you please explain why browsing the repo in a shell account
will be disabled ? I found this very useful when moving a large number
of packages from staging/testing to extra/core.
More information about the arch-dev-public